Which IPsec component provides encryption for VPN traffic and can also provide integrity?

Which IPsec component provides encryption for VPN traffic and can also provide integrity?

• A. AH (Authentication Header)
• B. ESP (Encapsulated Security Payload)
• C. IKE (Internet Key Exchange)
• D. TLS (Transport Layer Security)

Answer: (B)

In IPsec, the component that provides encryption for VPN traffic and can also ensure data integrity is the Encapsulated Security Payload. It encrypts the payload so eavesdroppers can’t read the data, and it can include an authentication tag to verify that the data hasn’t been tampered with. The other options serve different roles: Authentication Header offers integrity and authentication without encryption, IKE handles negotiating keys and security associations, and TLS is a separate protocol used for securing web traffic at a higher layer. So ESP is the part that both seals the content and can guard its integrity.

In IPsec, the component that provides encryption for VPN traffic and can also ensure data integrity is the Encapsulated Security Payload. It encrypts the payload so eavesdroppers can’t read the data, and it can include an authentication tag to verify that the data hasn’t been tampered with. The other options serve different roles: Authentication Header offers integrity and authentication without encryption, IKE handles negotiating keys and security associations, and TLS is a separate protocol used for securing web traffic at a higher layer. So ESP is the part that both seals the content and can guard its integrity.